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IN THE CLAIMS: 

This listing of the claims replaces all prior versions and listings of 
the claims . 



Claims 1-29 (canceled) 

1 Claim 30. (previously presented) A security system comprising: 

2 an activation token identifying system characteristics and 

3 specifying a threat level and at least one preset activation measure, 

4 wherein a system characteristic is one of the group of a hardware 

5 system, a service, a configuration of a service, a service execution 

6 platform, and a service version; 

7 a first system configured to at least review security and 

8 vulnerability information from information publishers and to provide 

9 the activation token based on the security and vulnerability 

10 information; and 

11 a second system configured to determine whether the activation 

12 token is relevant by checking if actual characteristics at the second 

13 system correspond to the system characteristics identified by the 

14 activation token, the second system further configured to transform the 

15 activation token into at least one activation measure if the activation 

16 token is considered relevant by the second system, the activation 

17 measure configured to modify services executing at the second system. 

1 Claim 31. (previously presented) The system of claim 30, further 

2 comprising a cryptographic means configured to verify at the second 

3 system that the first system is a trusted service. 

1 Claim 32. (currently amended) The system of claim 30, further 

2 comprising a reporting means configured to report to a system 

3 administrator of the second system afty- activation measures taken by the 

4 second system. 

1 Claim 33. (previously presented) The system of claim 30, wherein 

2 the first system is further configured to automatically filter the 

3 security and vulnerability information relevant to the system 

4 characteristics identified by the activation token. 

1 Claim 34. (currently amended) The system of claim 30, further 

2 comprising a list of a plurality of trusted service providers from whom 

3 activation tokens are accepted by the second system. 
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1 Claim 35. (previously presented) The system of claim 30, wherein 

2 the at least one preset activation measure is shutting down a service 

3 affected by the specified threat level. 

1 Claim 36. (previously presented) The system of claim 30, wherein 

2 the at least one preset activation measure is reconfiguring the 

3 functionality of a service affected by the specified threat level. 

1 Claim 37. (previously presented) The system of claim 30, wherein 

2 the at least one preset activation measure is installing a patch for a 

3 service affected by the specified threat level. 

1 Claim 38. (previously presented) The system of claim 30, wherein 

2 the at least one preset activation measure is alerting a system 

3 administrator. 



